#news


Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own

May 15, 2026 // 23:57

​During the second day of Pwn2Own Berlin 2026, competitors collected $385,750 in cash awards after exploiting 15 unique zero-day vulnerabilities in multiple products, including Windows […]

Funnel Builder WordPress plugin bug exploited to steal credit cards

May 15, 2026 // 23:56

A critical vulnerability in the Funnel Builder plugin for WordPress is being actively exploited to inject malicious JavaScript snippets into WooCommerce checkout pages. The flaw […]

Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent Access

May 15, 2026 // 23:52

The Russian state-sponsored hacking group known as Turla has transformed its custom backdoor Kazuar into a modular peer-to-peer (P2P) botnet that’s engineered for stealth and […]

Avada Builder WordPress plugin flaws allow site credential theft

May 15, 2026 // 19:16

Two vulnerabilities in the Avada Builder plugin for WordPress, with an estimated one million active installations, allow hackers to read arbitrary files and extract sensitive […]

Microsoft Edge to stop loading cleartext passwords in memory on startup

May 15, 2026 // 17:57

Microsoft is updating the Edge web browser to ensure it no longer loads saved passwords into process memory in clear text at startup. This behavior […]

Inside the REMUS Infostealer: Session Theft, MaaS, and Rapid Evolution

May 15, 2026 // 17:17

In recent months, a new infostealer malware known as REMUS has emerged across the cybercrime landscape, drawing attention from security researchers and malware analysts. Several […]

Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence

May 15, 2026 // 16:35

Cybersecurity researchers have disclosed a set of four security flaws in OpenClaw that could be chained to achieve data theft, privilege escalation, and persistence. The […]

TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates

May 15, 2026 // 14:06

OpenAI has disclosed that two of its employee devices in its corporate environment were impacted via the Mini Shai-Hulud supply chain attack on TanStack, but […]

What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface

May 15, 2026 // 14:05

In Your Biggest Security Risk Isn’t Malware — It’s What You Already Trust, we made a simple argument: the most dangerous activity inside most organizations […]

On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email

May 15, 2026 // 13:15

Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under active exploitation in the wild. The […]

Previous 1 … 300 301 302 303 304 … 388 Next